$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa File: 41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa (raw, json) Hash identifier: rIRWTkn9z57ytfWnzP5inZmRIzfvhuUjUu/1ro1Y5Xo= Subject key identifier: 63:64:7E:57:F9:43:8F:57:50:91:54:0C:9D:F9:86:60:69:B1:60:B1 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B0CDC2221F98DA47E87812180 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 8069 IP address blocks: 20.33.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:22:21:f9:8d:a4:7e:87:81:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=f62bbc08-e885-44df-bc97-0f89b0134f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d8:0a:88:64:95:1d:c5:9f:ac:5c:18:84:e7: 09:66:84:67:00:4e:95:cc:60:2a:f9:4e:de:0b:41: 61:a0:72:8b:97:fb:bc:b5:22:7c:9b:c8:58:9b:b3: 7d:6a:d0:af:ce:63:31:2d:70:cd:a6:17:a2:02:dd: f9:34:03:a9:56:be:6c:9f:c6:6f:32:0f:79:75:14: 73:96:ff:81:77:7e:57:9a:95:df:dd:14:db:d8:2a: 48:78:6f:a4:07:fb:8e:79:12:92:4a:df:c7:08:ed: 46:a7:fa:78:a6:2c:4a:c6:8f:b2:77:b4:90:fb:7e: 1e:c0:0a:6f:a2:ba:fd:0c:7b:ee:4b:f0:ad:49:9f: 1e:5e:f7:7e:54:3b:69:ad:2b:64:bc:0e:82:b8:9c: 56:ac:b7:0e:a6:d7:16:58:b8:68:db:b4:dc:2b:f6: 38:3e:e4:a0:92:a4:91:5b:88:92:0f:46:16:45:d9: 98:9b:9b:0c:ef:05:9b:55:e1:bd:ed:0e:dd:04:35: 0c:4d:64:77:f1:f3:c4:24:8d:d3:42:9f:1d:c8:4a: 18:f1:bc:ad:3a:d7:c3:7b:fc:a5:c1:81:5f:2d:dd: 1b:d6:5b:74:db:cf:bc:1a:0c:87:b0:2b:c3:6a:66: 3a:9c:e3:02:6f:44:b6:7f:d1:8c:09:e5:b2:0f:c1: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:64:7E:57:F9:43:8F:57:50:91:54:0C:9D:F9:86:60:69:B1:60:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/41d75923-4fed-3529-9c5f-c5e9ff40d9e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:fd:f3:78:c8:46:b6:d4:bc:f7:80:dc:25:6d:93:ec:ed:ec: 65:7d:c3:38:06:3d:72:eb:a3:3c:0a:a2:98:25:f7:07:cb:f1: 31:2f:2b:e7:b8:3e:5e:ec:94:ec:d2:06:5f:6f:3e:30:b6:66: 6e:d0:af:82:d4:1b:03:e0:be:6e:e1:12:f3:8f:07:c5:7e:9d: 63:a6:13:09:0b:36:a6:8e:d3:c0:78:e5:d4:ee:b0:e9:01:78: 3c:e3:e6:9f:6c:50:99:21:5e:ef:96:01:27:27:90:fc:8a:51: 50:0e:6f:27:24:8d:e6:99:92:62:46:d4:54:aa:15:f9:79:a8: 61:34:9b:93:ca:da:81:45:5c:62:87:7f:b2:88:2d:cf:ab:8f: 0f:f6:be:68:57:0e:a0:91:65:19:f3:30:4d:22:6e:09:0f:e2: da:7b:c4:25:79:83:98:26:0d:83:79:ba:e6:b9:c2:19:40:bf: db:33:ab:b2:98:f4:c7:e8:e5:d9:7a:ec:fd:d0:bc:f2:95:c7: 0f:41:1f:40:10:68:83:34:08:0d:e1:71:cc:0d:c6:62:5f:6c: 30:08:40:01:7d:c4:5e:9d:54:9a:5c:ee:35:65:a8:b1:ba:8d: c3:5d:47:c4:ef:d1:8a:35:42:4b:25:09:5c:cc:3d:c7:cb:e7: db:78:05:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CIh+Y2kfoeBIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZjYyYmJjMDgtZTg4NS00NGRmLWJjOTctMGY4OWIwMTM0ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitgKiGSVHcWfrFwYhOcJZoRnAE6VzGAq+U7e C0FhoHKLl/u8tSJ8m8hYm7N9atCvzmMxLXDNpheiAt35NAOpVr5sn8ZvMg95dRRz lv+Bd35XmpXf3RTb2CpIeG+kB/uOeRKSSt/HCO1Gp/p4pixKxo+yd7SQ+34ewApv orr9DHvuS/CtSZ8eXvd+VDtprStkvA6CuJxWrLcOptcWWLho27TcK/Y4PuSgkqSR W4iSD0YWRdmYm5sM7wWbVeG97Q7dBDUMTWR38fPEJI3TQp8dyEoY8bytOtfDe/yl wYFfLd0b1lt028+8GgyHsCvDamY6nOMCb0S2f9GMCeWyD8EuEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNkflf5Q49XUJFUDJ35hmBpsWCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDFkNzU5MjMtNGZlZC0z NTI5LTljNWYtYzVlOWZmNDBkOWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCGXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr983jIRrbUvPeA3CVtk+zt7GV9wzgGPXLrozwKopgl9wfL8TEvK+e4 Pl7slOzSBl9vPjC2Zm7Qr4LUGwPgvm7hEvOPB8V+nWOmEwkLNqaO08B45dTusOkB eDzj5p9sUJkhXu+WAScnkPyKUVAObyckjeaZkmJG1FSqFfl5qGE0m5PK2oFFXGKH f7KILc+rjw/2vmhXDqCRZRnzME0ibgkP4tp7xCV5g5gmDYN5uua5whlAv9szq7KY 9Mfo5dl67P3QvPKVxw9BH0AQaIM0CA3hccwNxmJfbDAIQAF9xF6dVJpc7jVlqLG6 jcNdR8Tv0Yo1QkslCVzMPcfL59t4Bdk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:02 2025 by rpki-client